How do I find cause of unexpected shutdown?

How do I find cause of unexpected shutdown?

In the field, type 6008, then click/tap on OK. This will give you a list of unexpected shutdown events at the top of the middle pane in Event Viewer. You can scroll through these listed events to see the the date and time of each one. When finished, you can close Event Viewer.

What is the event ID for unexpected shutdown?

Event ID 6008 gets logged to the system event log when a system shuts down unexpectedly. You will see the message “The previous system shutdown at time on date was unexpected.”

How do I find out why my computer shut down?

To check why the computer shutdown with Command Prompt, use these steps:

1. Open Start.
2. Search for Command Prompt and click the top result to open the console.
3. Type the following command to view event logs and press Enter:
4. Check each log description to determine the time and reason for the shutdown.

How do I view shutdown logs?

To find the Shutdown log in Windows 10, do the following.

1. Press the Win + R keys together on the keyboard to open the Run dialog, type eventvwr.
2. In Event Viewer, select Windows Logs -> System on the left.
3. On the right, click on the link Filter Current Log.

How do I check shutdown logs?

Here’s How:

1. Press the Win + R keys to open Run, type eventvwr.
2. In the left pane of Event Viewer, open Windows Logs and System, right click or press and hold on System, and click/tap on Filter Current Log. (
3. Enter the event ID’s below into the field, and click/tap on OK. (

How to find out from the logs what caused system shutdown?

When the system shuts down due to overheating you get logs like this: If you have a UPS and running a daemon to monitor power and shutdown you should obviously check its logs (NUT logs on /var/log/messages but apcupsd logs on /var/log/apcupsd*)

How to read shutdown logs in Event Viewer?

Read Shutdown Logs in Event Viewer in Windows. You can use Event Viewer to view the date, time, and user details of all shutdown events caused by a shut down (power off) or restart.

What causes the event log service to be stopped?

This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Logged when an app (ex: Windows Update) causes the system to restart, or when a user initiates a restart or shutdown. Logged as a clean shutdown. It gives the message “The Event log service was stopped”.

What are the event IDs for Windows 10 shut down?

In Windows 10, there are three events connected with shut down and restart. Event ID 1074 – Indicates that the shut down process was initiated by an app. For example, it can be Windows Update. Event ID 6006 – The clean shut down event. This means Windows 10 was turned off correctly. Event ID 6008 – Indicates a dirty/improper shutdown.